Solana-web3.js code library drains private keys, giving access to user wallets.
First seen on arstechnica.com
Jump to article: arstechnica.com/information-technology/2024/12/backdoor-slips-into-popular-code-library-drains-155k-from-digital-wallets/